alert tcp $EXTERNAL_NET any -> $HTTP_SERVERS $HTTP_PORTS (msg:"ET SCAN WSFuzzer Web Application Fuzzing"; flow:to_server,established; uricontent:"/ServiceDefinition"; content:"|0d 0a|User-Agent|3A| Python-urllib/"; classtype:attempted-recon; reference:url,www.owasp.org/index.php/Category%3aOWASP_WSFuzzer_Project; reference:url,doc.emergingthreats.net/2008628; reference:url,www.emergingthreats.net/cgi-bin/cvsweb.cgi/sigs/SCAN/SCAN_WSFuzzer; sid:2008628; rev:5;)
Added 2010-05-10 17:49:14 UTC
alert tcp $EXTERNAL_NET any -> $HTTP_SERVERS $HTTP_PORTS (msg:"ET SCAN WSFuzzer Web Application Fuzzing"; flow:to_server,established; uricontent:"/ServiceDefinition"; content:"|0d 0a|User-Agent|3A| Python-urllib/"; classtype:attempted-recon; reference:url,www.owasp.org/index.php/Category%3aOWASP_WSFuzzer_Project; reference:url,doc.emergingthreats.net/2008628; reference:url,www.emergingthreats.net/cgi-bin/cvsweb.cgi/sigs/SCAN/SCAN_WSFuzzer; sid:2008628; rev:5;)
Added 2010-05-10 17:49:14 UTC
alert tcp $EXTERNAL_NET any -> $HTTP_SERVERS $HTTP_PORTS (msg:"ET SCAN WSFuzzer Web Application Fuzzing"; flow:to_server,established; uricontent:"/ServiceDefinition"; content:"|0d 0a|User-Agent|3A| Python-urllib/"; classtype:attempted-recon; reference:url,www.owasp.org/index.php/Category%3aOWASP_WSFuzzer_Project; reference:url,doc.emergingthreats.net/2008628; reference:url,www.emergingthreats.net/cgi-bin/cvsweb.cgi/sigs/SCAN/SCAN_WSFuzzer; sid:2008628; rev:5;)
Added 2010-05-10 17:47:17 UTC
alert tcp $EXTERNAL_NET any -> $HTTP_SERVERS $HTTP_PORTS (msg:"ET SCAN WSFuzzer Web Application Fuzzing"; flow:to_server,established; uricontent:"/ServiceDefinition"; content:"|0d 0a|User-Agent|3A| Python-urllib/"; classtype:attempted-recon; reference:url,www.owasp.org/index.php/Category%3aOWASP_WSFuzzer_Project; reference:url,doc.emergingthreats.net/2008628; reference:url,www.emergingthreats.net/cgi-bin/cvsweb.cgi/sigs/SCAN/SCAN_WSFuzzer; sid:2008628; rev:5;)
Added 2010-05-10 17:47:17 UTC
alert tcp $EXTERNAL_NET any -> $HTTP_SERVERS $HTTP_PORTS (msg:"ET SCAN WSFuzzer Web Application Fuzzing"; flow:to_server,established; uricontent:"/ServiceDefinition"; content:"|0d 0a|User-Agent|3A| Python-urllib/"; classtype:attempted-recon; reference:url,www.owasp.org/index.php/Category%3aOWASP_WSFuzzer_Project; reference:url,doc.emergingthreats.net/2008628; reference:url,www.emergingthreats.net/cgi-bin/cvsweb.cgi/sigs/SCAN/SCAN_WSFuzzer; sid:2008628; rev:5;)
Added 2010-05-10 17:46:00 UTC
alert tcp $EXTERNAL_NET any -> $HTTP_SERVERS $HTTP_PORTS (msg:"ET SCAN WSFuzzer Web Application Fuzzing"; flow:to_server,established; uricontent:"/ServiceDefinition"; content:"|0d 0a|User-Agent|3A| Python-urllib/"; classtype:attempted-recon; reference:url,www.owasp.org/index.php/Category%3aOWASP_WSFuzzer_Project; reference:url,doc.emergingthreats.net/2008628; reference:url,www.emergingthreats.net/cgi-bin/cvsweb.cgi/sigs/SCAN/SCAN_WSFuzzer; sid:2008628; rev:5;)
Added 2010-05-10 17:46:00 UTC
alert tcp $EXTERNAL_NET any -> $HTTP_SERVERS $HTTP_PORTS (msg:"ET SCAN WSFuzzer Web Application Fuzzing"; flow:to_server,established; content:"/ServiceDefinition HTTP/1.1"; content:"User-Agent\: Python-urllib/"; offset:35; distance:35; classtype:attempted-recon; reference:url,www.owasp.org/index.php/Category%3aOWASP_WSFuzzer_Project; reference:url,doc.emergingthreats.net/2008628; reference:url,www.emergingthreats.net/cgi-bin/cvsweb.cgi/sigs/SCAN/SCAN_WSFuzzer; sid:2008628; rev:4;)
Added 2009-07-01 21:45:34 UTC
alert tcp $EXTERNAL_NET any -> $HTTP_SERVERS $HTTP_PORTS (msg:"ET SCAN WSFuzzer Web Application Fuzzing"; flow:to_server,established; content:"/ServiceDefinition HTTP/1.1"; content:"User-Agent\: Python-urllib/"; offset:35; distance:35; classtype:attempted-recon; reference:url,www.owasp.org/index.php/Category%3aOWASP_WSFuzzer_Project; reference:url,doc.emergingthreats.net/2008628; reference:url,www.emergingthreats.net/cgi-bin/cvsweb.cgi/sigs/SCAN/SCAN_WSFuzzer; sid:2008628; rev:4;)
Added 2009-07-01 21:45:34 UTC
alert tcp $EXTERNAL_NET any -> $HTTP_SERVERS $HTTP_PORTS (msg:"ET SCAN WSFuzzer Web Application Fuzzing"; flow:to_server,established; content:"/ServiceDefinition HTTP/1.1"; content:"User-Agent\: Python-urllib/"; offset:35; distance:35; classtype:attempted-recon; reference:url,www.owasp.org/index.php/Category\:OWASP_WSFuzzer_Project; reference:url,doc.emergingthreats.net/2008628; reference:url,www.emergingthreats.net/cgi-bin/cvsweb.cgi/sigs/SCAN/SCAN_WSFuzzer; sid:2008628; rev:3;)
Added 2009-02-12 18:21:19 UTC
alert tcp $EXTERNAL_NET any -> $HTTP_SERVERS $HTTP_PORTS (msg:"ET SCAN WSFuzzer Web Application Fuzzing"; flow:to_server,established; content:"/ServiceDefinition HTTP/1.1"; content:"User-Agent\: Python-urllib/"; offset:35; distance:35; classtype:attempted-recon; reference:url,www.owasp.org/index.php/Category\:OWASP_WSFuzzer_Project; reference:url,doc.emergingthreats.net/2008628; reference:url,www.emergingthreats.net/cgi-bin/cvsweb.cgi/sigs/SCAN/SCAN_WSFuzzer; sid:2008628; rev:3;)
Added 2009-02-12 18:21:19 UTC
alert tcp $EXTERNAL_NET any -> $HTTP_SERVERS $HTTP_PORTS (msg:"ET SCAN WSFuzzer Web Application Fuzzing"; flow:to_server,established; content:"/ServiceDefinition HTTP/1.1"; content:"User-Agent\: Python-urllib/"; offset:35; distance:35; classtype:attempted-recon; reference:url,www.owasp.org/index.php/Category\:OWASP_WSFuzzer_Project; sid:2008628; rev:2;)
Added 2008-10-06 09:00:21 UTC
alert tcp $EXTERNAL_NET any -> $HTTP_SERVERS $HTTP_PORTS (msg:"ET SCAN WSFuzzer Web Application Fuzzing"; flow:to_server,established; content:"/ServiceDefinition HTTP/1.1"; content:"User-Agent\: Python-urllib/"; offset:35; distance:35; classtype:attempted-recon; reference:url,www.owasp.org/index.php/Category\:OWASP_WSFuzzer_Project; sid:2008628; rev:2;)
Added 2008-10-06 09:00:21 UTC
alert tcp $EXTERNAL_NET any -> $HTTP_SERVERS $HTTP_PORTS (msg:"ET SCAN WSFuzzer Web Application Fuzzing"; flow:to_server,established; content:"/ServiceDefinition HTTP/1.1"; content:"User-Agent\: Python-urllib/"; offset:35; distance:35; classtype:attempted-recon; reference:url,www.owasp.org/index.php/Category:OWASP_WSFuzzer_Project; sid:2008628; rev:1
Added 2008-10-05 19:30:22 UTC